@athenaintel/react 0.39.0 → 0.40.1

package/dist/assets/use-asset-content.cjs

@@ -0,0 +1,127 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const reactQuery = require("@tanstack/react-query");
+const react = require("react");
+const mint = require("../collab/mint.cjs");
+const errors = require("../diagnostics/errors.cjs");
+const useAthenaRestQuery = require("../lib/use-athena-rest-query.cjs");
+const AthenaContext = require("../provider/AthenaContext.cjs");
+const credentialRenewal = require("../runtime/credential-renewal.cjs");
+function athenaAssetContentPath(assetId) {
+  return `/api/asset/content/${encodeURIComponent(assetId)}`;
+}
+function isAbortError(error) {
+  return (error instanceof DOMException || error instanceof Error) && error.name === "AbortError";
+}
+function assetContentError({
+  error,
+  assetId,
+  message,
+  hint
+}) {
+  if (isAbortError(error) || errors.isAthenaSdkError(error)) return error;
+  return new errors.AthenaSdkError({
+    code: "asset_content_failed",
+    message,
+    cause: error,
+    hint,
+    context: { assetId }
+  });
+}
+async function fetchAthenaAssetContent({
+  backendUrl,
+  auth,
+  assetId,
+  signal
+}) {
+  const url = `${mint.getAthenaApiBaseUrl(backendUrl)}${athenaAssetContentPath(assetId)}`;
+  let response;
+  try {
+    response = await credentialRenewal.sendWithCredentialRenewal(
+      auth,
+      (headers) => fetch(url, { method: "GET", headers, signal: signal ?? null })
+    );
+  } catch (error) {
+    throw assetContentError({
+      error,
+      assetId,
+      message: "Reading the asset could not reach the Agora API, or its credential could not be resolved.",
+      hint: "Check the network, that backendUrl points at the Agora API base, and that getToken resolves."
+    });
+  }
+  if (!response.ok) {
+    const refused = response.status === 401 || response.status === 403;
+    throw new errors.AthenaSdkError({
+      code: refused ? "auth_rejected" : "asset_content_failed",
+      message: `Reading the asset failed: ${response.status}`,
+      status: response.status,
+      detail: await response.json().catch(() => void 0),
+      hint: refused ? "The signed-in user cannot read this asset." : response.status === 404 ? "The asset has no stored file, or it no longer exists." : "Check that backendUrl points at the Agora API base.",
+      context: { assetId }
+    });
+  }
+  try {
+    return await response.blob();
+  } catch (error) {
+    throw assetContentError({
+      error,
+      assetId,
+      message: "Reading the asset failed while its file downloaded.",
+      hint: "Check the network and try again."
+    });
+  }
+}
+const NO_RETRY_STATUSES = /* @__PURE__ */ new Set([400, 401, 403, 404, 409]);
+function retryTransient(failureCount, error) {
+  const status = error.status;
+  if (typeof status === "number" && NO_RETRY_STATUSES.has(status)) return false;
+  return failureCount < 1;
+}
+function useAthenaAssetContent({
+  assetId,
+  enabled = true
+}) {
+  const config = AthenaContext.useAthenaConfig();
+  const { backendUrl, apiKey, getToken } = config;
+  const identity = useAthenaRestQuery.useAthenaQueryIdentity({ apiKey, token: config.token, getToken });
+  const queryClient = useAthenaRestQuery.useAthenaQueryClient();
+  const reader = react.useId();
+  return reactQuery.useQuery(
+    {
+      queryKey: ["athena-sdk", "asset-content", backendUrl, ...identity, assetId, reader],
+      // `config.token` is read at fetch time: the provider serves the latest
+      // token through a getter, so rotations reach the request.
+      queryFn: ({ signal }) => fetchAthenaAssetContent({
+        backendUrl,
+        auth: { apiKey, token: config.token, getToken },
+        assetId: assetId ?? "",
+        signal
+      }),
+      enabled: enabled && assetId !== null && assetId.length > 0 && backendUrl.length > 0,
+      staleTime: Number.POSITIVE_INFINITY,
+      gcTime: 0,
+      refetchOnWindowFocus: false,
+      refetchOnReconnect: false,
+      retry: retryTransient
+    },
+    queryClient
+  );
+}
+function useObjectUrl(blob) {
+  const [url, setUrl] = react.useState(null);
+  react.useEffect(() => {
+    if (!blob) {
+      setUrl(null);
+      return void 0;
+    }
+    const objectUrl = URL.createObjectURL(blob);
+    setUrl(objectUrl);
+    return () => URL.revokeObjectURL(objectUrl);
+  }, [blob]);
+  return url;
+}
+exports.athenaAssetContentPath = athenaAssetContentPath;
+exports.fetchAthenaAssetContent = fetchAthenaAssetContent;
+exports.useAthenaAssetContent = useAthenaAssetContent;
+exports.useObjectUrl = useObjectUrl;
+//# sourceMappingURL=use-asset-content.cjs.map

package/dist/assets/use-asset-content.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-asset-content.cjs","sources":["../../src/assets/use-asset-content.ts"],"sourcesContent":["/**\n * An asset's stored file, read with the signed-in user's own credential:\n * `GET /api/asset/content/{asset_id}` (agora `web/api/asset/views.py`\n * `serve_asset_content`), which passes the asset's permission check\n * (`get_asset_with_permission_check`) and streams the bytes through Agora.\n * No link is minted — no presigned storage URL, no embed token — so nothing\n * that could be opened without the credential ever exists: the bytes land in\n * a `Blob` that only this page holds, and a media element plays it through an\n * object URL (`useObjectUrl`).\n *\n * This is how the SDK plays an asset's video: a `<video src>` cannot carry\n * the `Authorization` / `X-API-KEY` header the SDK authenticates with, and the\n * alternatives (`/api/asset/fetch-presigned-url`, an `AthenaAssetEmbed` link)\n * each hand out a URL that works for whoever holds it. The whole file is read\n * before playback starts, so read it when the person asks to play, not on\n * mount.\n */\nimport { useQuery, type UseQueryResult } from '@tanstack/react-query';\nimport { useEffect, useId, useState } from 'react';\nimport { getAthenaApiBaseUrl } from '../collab/mint';\nimport { AthenaSdkError, isAthenaSdkError } from '../diagnostics/errors';\nimport { useAthenaQueryClient, useAthenaQueryIdentity } from '../lib/use-athena-rest-query';\nimport { useAthenaConfig } from '../provider/AthenaContext';\nimport { sendWithCredentialRenewal } from '../runtime/credential-renewal';\nimport type { StatewireAuthSource } from '../runtime/statewire-auth-headers';\n\n/** `/api/asset/content/{asset_id}`: the asset's stored file, permission-checked. */\nexport function athenaAssetContentPath(assetId: string): string {\n  return `/api/asset/content/${encodeURIComponent(assetId)}`;\n}\n\n/** A `fetch` the caller cancelled (unmount, a newer query): lifecycle, not failure. */\nfunction isAbortError(error: unknown): boolean {\n  return (error instanceof DOMException || error instanceof Error) && error.name === 'AbortError';\n}\n\n/** `error` as an `asset_content_failed` SDK error; an abort or an SDK error passes through. */\nfunction assetContentError({\n  error,\n  assetId,\n  message,\n  hint,\n}: {\n  error: unknown;\n  assetId: string;\n  message: string;\n  hint: string;\n}): unknown {\n  if (isAbortError(error) || isAthenaSdkError(error)) return error;\n  return new AthenaSdkError({\n    code: 'asset_content_failed',\n    message,\n    cause: error,\n    hint,\n    context: { assetId },\n  });\n}\n\n/**\n * Read an asset's stored file as a `Blob`. The credential rides\n * `Authorization: Bearer` (resolved live through `getToken` when the host gave\n * one) or `X-API-KEY`; a refused bearer (`401`) is renewed once\n * (`sendWithCredentialRenewal`). Every failure is an `AthenaSdkError` —\n * `auth_rejected` for a 401 / 403, else `asset_content_failed` (with the HTTP\n * `status` when the server answered), a credential that could not be\n * resolved and a download cut off mid-body included; only an abort keeps its\n * own identity.\n */\nexport async function fetchAthenaAssetContent({\n  backendUrl,\n  auth,\n  assetId,\n  signal,\n}: {\n  backendUrl: string;\n  auth: StatewireAuthSource;\n  assetId: string;\n  signal?: AbortSignal;\n}): Promise<Blob> {\n  const url = `${getAthenaApiBaseUrl(backendUrl)}${athenaAssetContentPath(assetId)}`;\n  let response: Response;\n  try {\n    response = await sendWithCredentialRenewal(auth, (headers) =>\n      fetch(url, { method: 'GET', headers, signal: signal ?? null }),\n    );\n  } catch (error) {\n    throw assetContentError({\n      error,\n      assetId,\n      message: 'Reading the asset could not reach the Agora API, or its credential could not be resolved.',\n      hint: 'Check the network, that backendUrl points at the Agora API base, and that getToken resolves.',\n    });\n  }\n  if (!response.ok) {\n    const refused = response.status === 401 || response.status === 403;\n    throw new AthenaSdkError({\n      code: refused ? 'auth_rejected' : 'asset_content_failed',\n      message: `Reading the asset failed: ${response.status}`,\n      status: response.status,\n      detail: await response.json().catch(() => undefined),\n      hint: refused\n        ? 'The signed-in user cannot read this asset.'\n        : response.status === 404\n          ? 'The asset has no stored file, or it no longer exists.'\n          : 'Check that backendUrl points at the Agora API base.',\n      context: { assetId },\n    });\n  }\n  try {\n    return await response.blob();\n  } catch (error) {\n    throw assetContentError({\n      error,\n      assetId,\n      message: 'Reading the asset failed while its file downloaded.',\n      hint: 'Check the network and try again.',\n    });\n  }\n}\n\nconst NO_RETRY_STATUSES: ReadonlySet<number> = new Set([400, 401, 403, 404, 409]);\n\n/** Retry a transient failure once; a refusal or a missing file answers the same way again. */\nfunction retryTransient(failureCount: number, error: Error): boolean {\n  const status = (error as { status?: unknown }).status;\n  if (typeof status === 'number' && NO_RETRY_STATUSES.has(status)) return false;\n  return failureCount < 1;\n}\n\nexport interface UseAthenaAssetContentOptions {\n  /** The asset to read; `null` holds the query idle. */\n  assetId: string | null;\n  /** `false` holds the query idle (read on demand: the whole file is downloaded). Default `true`. */\n  enabled?: boolean;\n}\n\n/**\n * An asset's stored file through TanStack Query, with the provider's\n * `backendUrl` and credentials. Each mounted hook reads its own copy: the key\n * carries the hook instance as well as the asset, the signed-in principal and\n * a fingerprint of the credential (`useAthenaQueryIdentity`, never the\n * credential itself), and the bytes are dropped as soon as it unmounts. So no\n * reader is ever handed bytes another mount read — not even behind a host\n * `getToken`, whose account the key cannot see — and every new reader passes\n * the permission check again. While mounted the file is read once (a stored\n * file does not change under its asset id); `refetch()` reads it again.\n */\nexport function useAthenaAssetContent({\n  assetId,\n  enabled = true,\n}: UseAthenaAssetContentOptions): UseQueryResult<Blob, Error> {\n  const config = useAthenaConfig();\n  const { backendUrl, apiKey, getToken } = config;\n  const identity = useAthenaQueryIdentity({ apiKey, token: config.token, getToken });\n  const queryClient = useAthenaQueryClient();\n  const reader = useId();\n  return useQuery(\n    {\n      queryKey: ['athena-sdk', 'asset-content', backendUrl, ...identity, assetId, reader],\n      // `config.token` is read at fetch time: the provider serves the latest\n      // token through a getter, so rotations reach the request.\n      queryFn: ({ signal }) =>\n        fetchAthenaAssetContent({\n          backendUrl,\n          auth: { apiKey, token: config.token, getToken },\n          assetId: assetId ?? '',\n          signal,\n        }),\n      enabled: enabled && assetId !== null && assetId.length > 0 && backendUrl.length > 0,\n      staleTime: Number.POSITIVE_INFINITY,\n      gcTime: 0,\n      refetchOnWindowFocus: false,\n      refetchOnReconnect: false,\n      retry: retryTransient,\n    },\n    queryClient,\n  );\n}\n\n/**\n * An object URL for `blob` while it is shown, revoked when the blob changes\n * or the component unmounts; `null` without a blob.\n */\nexport function useObjectUrl(blob: Blob | null | undefined): string | null {\n  const [url, setUrl] = useState<string | null>(null);\n  useEffect(() => {\n    if (!blob) {\n      setUrl(null);\n      return undefined;\n    }\n    const objectUrl = URL.createObjectURL(blob);\n    setUrl(objectUrl);\n    return () => URL.revokeObjectURL(objectUrl);\n  }, [blob]);\n  return url;\n}\n"],"names":["isAthenaSdkError","AthenaSdkError","getAthenaApiBaseUrl","sendWithCredentialRenewal","useAthenaConfig","useAthenaQueryIdentity","useAthenaQueryClient","useId","useQuery","useState","useEffect"],"mappings":";;;;;;;;;AA2BO,SAAS,uBAAuB,SAAyB;AAC9D,SAAO,sBAAsB,mBAAmB,OAAO,CAAC;AAC1D;AAGA,SAAS,aAAa,OAAyB;AAC7C,UAAQ,iBAAiB,gBAAgB,iBAAiB,UAAU,MAAM,SAAS;AACrF;AAGA,SAAS,kBAAkB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKY;AACV,MAAI,aAAa,KAAK,KAAKA,OAAAA,iBAAiB,KAAK,EAAG,QAAO;AAC3D,SAAO,IAAIC,OAAAA,eAAe;AAAA,IACxB,MAAM;AAAA,IACN;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,SAAS,EAAE,QAAA;AAAA,EAAQ,CACpB;AACH;AAYA,eAAsB,wBAAwB;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKkB;AAChB,QAAM,MAAM,GAAGC,yBAAoB,UAAU,CAAC,GAAG,uBAAuB,OAAO,CAAC;AAChF,MAAI;AACJ,MAAI;AACF,eAAW,MAAMC,kBAAAA;AAAAA,MAA0B;AAAA,MAAM,CAAC,YAChD,MAAM,KAAK,EAAE,QAAQ,OAAO,SAAS,QAAQ,UAAU,KAAA,CAAM;AAAA,IAAA;AAAA,EAEjE,SAAS,OAAO;AACd,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,UAAU,SAAS,WAAW,OAAO,SAAS,WAAW;AAC/D,UAAM,IAAIF,OAAAA,eAAe;AAAA,MACvB,MAAM,UAAU,kBAAkB;AAAA,MAClC,SAAS,6BAA6B,SAAS,MAAM;AAAA,MACrD,QAAQ,SAAS;AAAA,MACjB,QAAQ,MAAM,SAAS,OAAO,MAAM,MAAM,MAAS;AAAA,MACnD,MAAM,UACF,+CACA,SAAS,WAAW,MAClB,0DACA;AAAA,MACN,SAAS,EAAE,QAAA;AAAA,IAAQ,CACpB;AAAA,EACH;AACA,MAAI;AACF,WAAO,MAAM,SAAS,KAAA;AAAA,EACxB,SAAS,OAAO;AACd,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACF;AAEA,MAAM,wCAA6C,IAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,CAAC;AAGhF,SAAS,eAAe,cAAsB,OAAuB;AACnE,QAAM,SAAU,MAA+B;AAC/C,MAAI,OAAO,WAAW,YAAY,kBAAkB,IAAI,MAAM,EAAG,QAAO;AACxE,SAAO,eAAe;AACxB;AAoBO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA,UAAU;AACZ,GAA8D;AAC5D,QAAM,SAASG,cAAAA,gBAAA;AACf,QAAM,EAAE,YAAY,QAAQ,SAAA,IAAa;AACzC,QAAM,WAAWC,mBAAAA,uBAAuB,EAAE,QAAQ,OAAO,OAAO,OAAO,UAAU;AACjF,QAAM,cAAcC,mBAAAA,qBAAA;AACpB,QAAM,SAASC,MAAAA,MAAA;AACf,SAAOC,WAAAA;AAAAA,IACL;AAAA,MACE,UAAU,CAAC,cAAc,iBAAiB,YAAY,GAAG,UAAU,SAAS,MAAM;AAAA;AAAA;AAAA,MAGlF,SAAS,CAAC,EAAE,OAAA,MACV,wBAAwB;AAAA,QACtB;AAAA,QACA,MAAM,EAAE,QAAQ,OAAO,OAAO,OAAO,SAAA;AAAA,QACrC,SAAS,WAAW;AAAA,QACpB;AAAA,MAAA,CACD;AAAA,MACH,SAAS,WAAW,YAAY,QAAQ,QAAQ,SAAS,KAAK,WAAW,SAAS;AAAA,MAClF,WAAW,OAAO;AAAA,MAClB,QAAQ;AAAA,MACR,sBAAsB;AAAA,MACtB,oBAAoB;AAAA,MACpB,OAAO;AAAA,IAAA;AAAA,IAET;AAAA,EAAA;AAEJ;AAMO,SAAS,aAAa,MAA8C;AACzE,QAAM,CAAC,KAAK,MAAM,IAAIC,MAAAA,SAAwB,IAAI;AAClDC,QAAAA,UAAU,MAAM;AACd,QAAI,CAAC,MAAM;AACT,aAAO,IAAI;AACX,aAAO;AAAA,IACT;AACA,UAAM,YAAY,IAAI,gBAAgB,IAAI;AAC1C,WAAO,SAAS;AAChB,WAAO,MAAM,IAAI,gBAAgB,SAAS;AAAA,EAC5C,GAAG,CAAC,IAAI,CAAC;AACT,SAAO;AACT;;;;;"}

package/dist/assets/use-asset-content.d.ts

@@ -0,0 +1,60 @@
+/**
+ * An asset's stored file, read with the signed-in user's own credential:
+ * `GET /api/asset/content/{asset_id}` (agora `web/api/asset/views.py`
+ * `serve_asset_content`), which passes the asset's permission check
+ * (`get_asset_with_permission_check`) and streams the bytes through Agora.
+ * No link is minted — no presigned storage URL, no embed token — so nothing
+ * that could be opened without the credential ever exists: the bytes land in
+ * a `Blob` that only this page holds, and a media element plays it through an
+ * object URL (`useObjectUrl`).
+ *
+ * This is how the SDK plays an asset's video: a `<video src>` cannot carry
+ * the `Authorization` / `X-API-KEY` header the SDK authenticates with, and the
+ * alternatives (`/api/asset/fetch-presigned-url`, an `AthenaAssetEmbed` link)
+ * each hand out a URL that works for whoever holds it. The whole file is read
+ * before playback starts, so read it when the person asks to play, not on
+ * mount.
+ */
+import { type UseQueryResult } from '@tanstack/react-query';
+import type { StatewireAuthSource } from '../runtime/statewire-auth-headers';
+/** `/api/asset/content/{asset_id}`: the asset's stored file, permission-checked. */
+export declare function athenaAssetContentPath(assetId: string): string;
+/**
+ * Read an asset's stored file as a `Blob`. The credential rides
+ * `Authorization: Bearer` (resolved live through `getToken` when the host gave
+ * one) or `X-API-KEY`; a refused bearer (`401`) is renewed once
+ * (`sendWithCredentialRenewal`). Every failure is an `AthenaSdkError` —
+ * `auth_rejected` for a 401 / 403, else `asset_content_failed` (with the HTTP
+ * `status` when the server answered), a credential that could not be
+ * resolved and a download cut off mid-body included; only an abort keeps its
+ * own identity.
+ */
+export declare function fetchAthenaAssetContent({ backendUrl, auth, assetId, signal, }: {
+    backendUrl: string;
+    auth: StatewireAuthSource;
+    assetId: string;
+    signal?: AbortSignal;
+}): Promise<Blob>;
+export interface UseAthenaAssetContentOptions {
+    /** The asset to read; `null` holds the query idle. */
+    assetId: string | null;
+    /** `false` holds the query idle (read on demand: the whole file is downloaded). Default `true`. */
+    enabled?: boolean;
+}
+/**
+ * An asset's stored file through TanStack Query, with the provider's
+ * `backendUrl` and credentials. Each mounted hook reads its own copy: the key
+ * carries the hook instance as well as the asset, the signed-in principal and
+ * a fingerprint of the credential (`useAthenaQueryIdentity`, never the
+ * credential itself), and the bytes are dropped as soon as it unmounts. So no
+ * reader is ever handed bytes another mount read — not even behind a host
+ * `getToken`, whose account the key cannot see — and every new reader passes
+ * the permission check again. While mounted the file is read once (a stored
+ * file does not change under its asset id); `refetch()` reads it again.
+ */
+export declare function useAthenaAssetContent({ assetId, enabled, }: UseAthenaAssetContentOptions): UseQueryResult<Blob, Error>;
+/**
+ * An object URL for `blob` while it is shown, revoked when the blob changes
+ * or the component unmounts; `null` without a blob.
+ */
+export declare function useObjectUrl(blob: Blob | null | undefined): string | null;

package/dist/assets/use-asset-content.js

@@ -0,0 +1,127 @@
+import { useQuery } from "@tanstack/react-query";
+import { useId, useState, useEffect } from "react";
+import { getAthenaApiBaseUrl } from "../collab/mint.js";
+import { AthenaSdkError, isAthenaSdkError } from "../diagnostics/errors.js";
+import { useAthenaQueryIdentity, useAthenaQueryClient } from "../lib/use-athena-rest-query.js";
+import { useAthenaConfig } from "../provider/AthenaContext.js";
+import { sendWithCredentialRenewal } from "../runtime/credential-renewal.js";
+function athenaAssetContentPath(assetId) {
+  return `/api/asset/content/${encodeURIComponent(assetId)}`;
+}
+function isAbortError(error) {
+  return (error instanceof DOMException || error instanceof Error) && error.name === "AbortError";
+}
+function assetContentError({
+  error,
+  assetId,
+  message,
+  hint
+}) {
+  if (isAbortError(error) || isAthenaSdkError(error)) return error;
+  return new AthenaSdkError({
+    code: "asset_content_failed",
+    message,
+    cause: error,
+    hint,
+    context: { assetId }
+  });
+}
+async function fetchAthenaAssetContent({
+  backendUrl,
+  auth,
+  assetId,
+  signal
+}) {
+  const url = `${getAthenaApiBaseUrl(backendUrl)}${athenaAssetContentPath(assetId)}`;
+  let response;
+  try {
+    response = await sendWithCredentialRenewal(
+      auth,
+      (headers) => fetch(url, { method: "GET", headers, signal: signal ?? null })
+    );
+  } catch (error) {
+    throw assetContentError({
+      error,
+      assetId,
+      message: "Reading the asset could not reach the Agora API, or its credential could not be resolved.",
+      hint: "Check the network, that backendUrl points at the Agora API base, and that getToken resolves."
+    });
+  }
+  if (!response.ok) {
+    const refused = response.status === 401 || response.status === 403;
+    throw new AthenaSdkError({
+      code: refused ? "auth_rejected" : "asset_content_failed",
+      message: `Reading the asset failed: ${response.status}`,
+      status: response.status,
+      detail: await response.json().catch(() => void 0),
+      hint: refused ? "The signed-in user cannot read this asset." : response.status === 404 ? "The asset has no stored file, or it no longer exists." : "Check that backendUrl points at the Agora API base.",
+      context: { assetId }
+    });
+  }
+  try {
+    return await response.blob();
+  } catch (error) {
+    throw assetContentError({
+      error,
+      assetId,
+      message: "Reading the asset failed while its file downloaded.",
+      hint: "Check the network and try again."
+    });
+  }
+}
+const NO_RETRY_STATUSES = /* @__PURE__ */ new Set([400, 401, 403, 404, 409]);
+function retryTransient(failureCount, error) {
+  const status = error.status;
+  if (typeof status === "number" && NO_RETRY_STATUSES.has(status)) return false;
+  return failureCount < 1;
+}
+function useAthenaAssetContent({
+  assetId,
+  enabled = true
+}) {
+  const config = useAthenaConfig();
+  const { backendUrl, apiKey, getToken } = config;
+  const identity = useAthenaQueryIdentity({ apiKey, token: config.token, getToken });
+  const queryClient = useAthenaQueryClient();
+  const reader = useId();
+  return useQuery(
+    {
+      queryKey: ["athena-sdk", "asset-content", backendUrl, ...identity, assetId, reader],
+      // `config.token` is read at fetch time: the provider serves the latest
+      // token through a getter, so rotations reach the request.
+      queryFn: ({ signal }) => fetchAthenaAssetContent({
+        backendUrl,
+        auth: { apiKey, token: config.token, getToken },
+        assetId: assetId ?? "",
+        signal
+      }),
+      enabled: enabled && assetId !== null && assetId.length > 0 && backendUrl.length > 0,
+      staleTime: Number.POSITIVE_INFINITY,
+      gcTime: 0,
+      refetchOnWindowFocus: false,
+      refetchOnReconnect: false,
+      retry: retryTransient
+    },
+    queryClient
+  );
+}
+function useObjectUrl(blob) {
+  const [url, setUrl] = useState(null);
+  useEffect(() => {
+    if (!blob) {
+      setUrl(null);
+      return void 0;
+    }
+    const objectUrl = URL.createObjectURL(blob);
+    setUrl(objectUrl);
+    return () => URL.revokeObjectURL(objectUrl);
+  }, [blob]);
+  return url;
+}
+export {
+  athenaAssetContentPath,
+  fetchAthenaAssetContent,
+  useAthenaAssetContent,
+  useObjectUrl
+};
+//# sourceMappingURL=use-asset-content.js.map

package/dist/assets/use-asset-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-asset-content.js","sources":["../../src/assets/use-asset-content.ts"],"sourcesContent":["/**\n * An asset's stored file, read with the signed-in user's own credential:\n * `GET /api/asset/content/{asset_id}` (agora `web/api/asset/views.py`\n * `serve_asset_content`), which passes the asset's permission check\n * (`get_asset_with_permission_check`) and streams the bytes through Agora.\n * No link is minted — no presigned storage URL, no embed token — so nothing\n * that could be opened without the credential ever exists: the bytes land in\n * a `Blob` that only this page holds, and a media element plays it through an\n * object URL (`useObjectUrl`).\n *\n * This is how the SDK plays an asset's video: a `<video src>` cannot carry\n * the `Authorization` / `X-API-KEY` header the SDK authenticates with, and the\n * alternatives (`/api/asset/fetch-presigned-url`, an `AthenaAssetEmbed` link)\n * each hand out a URL that works for whoever holds it. The whole file is read\n * before playback starts, so read it when the person asks to play, not on\n * mount.\n */\nimport { useQuery, type UseQueryResult } from '@tanstack/react-query';\nimport { useEffect, useId, useState } from 'react';\nimport { getAthenaApiBaseUrl } from '../collab/mint';\nimport { AthenaSdkError, isAthenaSdkError } from '../diagnostics/errors';\nimport { useAthenaQueryClient, useAthenaQueryIdentity } from '../lib/use-athena-rest-query';\nimport { useAthenaConfig } from '../provider/AthenaContext';\nimport { sendWithCredentialRenewal } from '../runtime/credential-renewal';\nimport type { StatewireAuthSource } from '../runtime/statewire-auth-headers';\n\n/** `/api/asset/content/{asset_id}`: the asset's stored file, permission-checked. */\nexport function athenaAssetContentPath(assetId: string): string {\n  return `/api/asset/content/${encodeURIComponent(assetId)}`;\n}\n\n/** A `fetch` the caller cancelled (unmount, a newer query): lifecycle, not failure. */\nfunction isAbortError(error: unknown): boolean {\n  return (error instanceof DOMException || error instanceof Error) && error.name === 'AbortError';\n}\n\n/** `error` as an `asset_content_failed` SDK error; an abort or an SDK error passes through. */\nfunction assetContentError({\n  error,\n  assetId,\n  message,\n  hint,\n}: {\n  error: unknown;\n  assetId: string;\n  message: string;\n  hint: string;\n}): unknown {\n  if (isAbortError(error) || isAthenaSdkError(error)) return error;\n  return new AthenaSdkError({\n    code: 'asset_content_failed',\n    message,\n    cause: error,\n    hint,\n    context: { assetId },\n  });\n}\n\n/**\n * Read an asset's stored file as a `Blob`. The credential rides\n * `Authorization: Bearer` (resolved live through `getToken` when the host gave\n * one) or `X-API-KEY`; a refused bearer (`401`) is renewed once\n * (`sendWithCredentialRenewal`). Every failure is an `AthenaSdkError` —\n * `auth_rejected` for a 401 / 403, else `asset_content_failed` (with the HTTP\n * `status` when the server answered), a credential that could not be\n * resolved and a download cut off mid-body included; only an abort keeps its\n * own identity.\n */\nexport async function fetchAthenaAssetContent({\n  backendUrl,\n  auth,\n  assetId,\n  signal,\n}: {\n  backendUrl: string;\n  auth: StatewireAuthSource;\n  assetId: string;\n  signal?: AbortSignal;\n}): Promise<Blob> {\n  const url = `${getAthenaApiBaseUrl(backendUrl)}${athenaAssetContentPath(assetId)}`;\n  let response: Response;\n  try {\n    response = await sendWithCredentialRenewal(auth, (headers) =>\n      fetch(url, { method: 'GET', headers, signal: signal ?? null }),\n    );\n  } catch (error) {\n    throw assetContentError({\n      error,\n      assetId,\n      message: 'Reading the asset could not reach the Agora API, or its credential could not be resolved.',\n      hint: 'Check the network, that backendUrl points at the Agora API base, and that getToken resolves.',\n    });\n  }\n  if (!response.ok) {\n    const refused = response.status === 401 || response.status === 403;\n    throw new AthenaSdkError({\n      code: refused ? 'auth_rejected' : 'asset_content_failed',\n      message: `Reading the asset failed: ${response.status}`,\n      status: response.status,\n      detail: await response.json().catch(() => undefined),\n      hint: refused\n        ? 'The signed-in user cannot read this asset.'\n        : response.status === 404\n          ? 'The asset has no stored file, or it no longer exists.'\n          : 'Check that backendUrl points at the Agora API base.',\n      context: { assetId },\n    });\n  }\n  try {\n    return await response.blob();\n  } catch (error) {\n    throw assetContentError({\n      error,\n      assetId,\n      message: 'Reading the asset failed while its file downloaded.',\n      hint: 'Check the network and try again.',\n    });\n  }\n}\n\nconst NO_RETRY_STATUSES: ReadonlySet<number> = new Set([400, 401, 403, 404, 409]);\n\n/** Retry a transient failure once; a refusal or a missing file answers the same way again. */\nfunction retryTransient(failureCount: number, error: Error): boolean {\n  const status = (error as { status?: unknown }).status;\n  if (typeof status === 'number' && NO_RETRY_STATUSES.has(status)) return false;\n  return failureCount < 1;\n}\n\nexport interface UseAthenaAssetContentOptions {\n  /** The asset to read; `null` holds the query idle. */\n  assetId: string | null;\n  /** `false` holds the query idle (read on demand: the whole file is downloaded). Default `true`. */\n  enabled?: boolean;\n}\n\n/**\n * An asset's stored file through TanStack Query, with the provider's\n * `backendUrl` and credentials. Each mounted hook reads its own copy: the key\n * carries the hook instance as well as the asset, the signed-in principal and\n * a fingerprint of the credential (`useAthenaQueryIdentity`, never the\n * credential itself), and the bytes are dropped as soon as it unmounts. So no\n * reader is ever handed bytes another mount read — not even behind a host\n * `getToken`, whose account the key cannot see — and every new reader passes\n * the permission check again. While mounted the file is read once (a stored\n * file does not change under its asset id); `refetch()` reads it again.\n */\nexport function useAthenaAssetContent({\n  assetId,\n  enabled = true,\n}: UseAthenaAssetContentOptions): UseQueryResult<Blob, Error> {\n  const config = useAthenaConfig();\n  const { backendUrl, apiKey, getToken } = config;\n  const identity = useAthenaQueryIdentity({ apiKey, token: config.token, getToken });\n  const queryClient = useAthenaQueryClient();\n  const reader = useId();\n  return useQuery(\n    {\n      queryKey: ['athena-sdk', 'asset-content', backendUrl, ...identity, assetId, reader],\n      // `config.token` is read at fetch time: the provider serves the latest\n      // token through a getter, so rotations reach the request.\n      queryFn: ({ signal }) =>\n        fetchAthenaAssetContent({\n          backendUrl,\n          auth: { apiKey, token: config.token, getToken },\n          assetId: assetId ?? '',\n          signal,\n        }),\n      enabled: enabled && assetId !== null && assetId.length > 0 && backendUrl.length > 0,\n      staleTime: Number.POSITIVE_INFINITY,\n      gcTime: 0,\n      refetchOnWindowFocus: false,\n      refetchOnReconnect: false,\n      retry: retryTransient,\n    },\n    queryClient,\n  );\n}\n\n/**\n * An object URL for `blob` while it is shown, revoked when the blob changes\n * or the component unmounts; `null` without a blob.\n */\nexport function useObjectUrl(blob: Blob | null | undefined): string | null {\n  const [url, setUrl] = useState<string | null>(null);\n  useEffect(() => {\n    if (!blob) {\n      setUrl(null);\n      return undefined;\n    }\n    const objectUrl = URL.createObjectURL(blob);\n    setUrl(objectUrl);\n    return () => URL.revokeObjectURL(objectUrl);\n  }, [blob]);\n  return url;\n}\n"],"names":[],"mappings":";;;;;;;AA2BO,SAAS,uBAAuB,SAAyB;AAC9D,SAAO,sBAAsB,mBAAmB,OAAO,CAAC;AAC1D;AAGA,SAAS,aAAa,OAAyB;AAC7C,UAAQ,iBAAiB,gBAAgB,iBAAiB,UAAU,MAAM,SAAS;AACrF;AAGA,SAAS,kBAAkB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKY;AACV,MAAI,aAAa,KAAK,KAAK,iBAAiB,KAAK,EAAG,QAAO;AAC3D,SAAO,IAAI,eAAe;AAAA,IACxB,MAAM;AAAA,IACN;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,SAAS,EAAE,QAAA;AAAA,EAAQ,CACpB;AACH;AAYA,eAAsB,wBAAwB;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKkB;AAChB,QAAM,MAAM,GAAG,oBAAoB,UAAU,CAAC,GAAG,uBAAuB,OAAO,CAAC;AAChF,MAAI;AACJ,MAAI;AACF,eAAW,MAAM;AAAA,MAA0B;AAAA,MAAM,CAAC,YAChD,MAAM,KAAK,EAAE,QAAQ,OAAO,SAAS,QAAQ,UAAU,KAAA,CAAM;AAAA,IAAA;AAAA,EAEjE,SAAS,OAAO;AACd,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,UAAU,SAAS,WAAW,OAAO,SAAS,WAAW;AAC/D,UAAM,IAAI,eAAe;AAAA,MACvB,MAAM,UAAU,kBAAkB;AAAA,MAClC,SAAS,6BAA6B,SAAS,MAAM;AAAA,MACrD,QAAQ,SAAS;AAAA,MACjB,QAAQ,MAAM,SAAS,OAAO,MAAM,MAAM,MAAS;AAAA,MACnD,MAAM,UACF,+CACA,SAAS,WAAW,MAClB,0DACA;AAAA,MACN,SAAS,EAAE,QAAA;AAAA,IAAQ,CACpB;AAAA,EACH;AACA,MAAI;AACF,WAAO,MAAM,SAAS,KAAA;AAAA,EACxB,SAAS,OAAO;AACd,UAAM,kBAAkB;AAAA,MACtB;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACF;AAEA,MAAM,wCAA6C,IAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,CAAC;AAGhF,SAAS,eAAe,cAAsB,OAAuB;AACnE,QAAM,SAAU,MAA+B;AAC/C,MAAI,OAAO,WAAW,YAAY,kBAAkB,IAAI,MAAM,EAAG,QAAO;AACxE,SAAO,eAAe;AACxB;AAoBO,SAAS,sBAAsB;AAAA,EACpC;AAAA,EACA,UAAU;AACZ,GAA8D;AAC5D,QAAM,SAAS,gBAAA;AACf,QAAM,EAAE,YAAY,QAAQ,SAAA,IAAa;AACzC,QAAM,WAAW,uBAAuB,EAAE,QAAQ,OAAO,OAAO,OAAO,UAAU;AACjF,QAAM,cAAc,qBAAA;AACpB,QAAM,SAAS,MAAA;AACf,SAAO;AAAA,IACL;AAAA,MACE,UAAU,CAAC,cAAc,iBAAiB,YAAY,GAAG,UAAU,SAAS,MAAM;AAAA;AAAA;AAAA,MAGlF,SAAS,CAAC,EAAE,OAAA,MACV,wBAAwB;AAAA,QACtB;AAAA,QACA,MAAM,EAAE,QAAQ,OAAO,OAAO,OAAO,SAAA;AAAA,QACrC,SAAS,WAAW;AAAA,QACpB;AAAA,MAAA,CACD;AAAA,MACH,SAAS,WAAW,YAAY,QAAQ,QAAQ,SAAS,KAAK,WAAW,SAAS;AAAA,MAClF,WAAW,OAAO;AAAA,MAClB,QAAQ;AAAA,MACR,sBAAsB;AAAA,MACtB,oBAAoB;AAAA,MACpB,OAAO;AAAA,IAAA;AAAA,IAET;AAAA,EAAA;AAEJ;AAMO,SAAS,aAAa,MAA8C;AACzE,QAAM,CAAC,KAAK,MAAM,IAAI,SAAwB,IAAI;AAClD,YAAU,MAAM;AACd,QAAI,CAAC,MAAM;AACT,aAAO,IAAI;AACX,aAAO;AAAA,IACT;AACA,UAAM,YAAY,IAAI,gBAAgB,IAAI;AAC1C,WAAO,SAAS;AAChB,WAAO,MAAM,IAAI,gBAAgB,SAAS;AAAA,EAC5C,GAAG,CAAC,IAAI,CAAC;AACT,SAAO;AACT;"}

package/dist/chat/AthenaChat.cjs

@@ -49,6 +49,7 @@ const lucideReact = require("lucide-react");
 const react$1 = require("react");
 const threadIdContext = require("../threads/thread-id-context.cjs");
 const statewireThreadList = require("../threads/statewire-thread-list.cjs");
+const markViewedThreadRead = require("../threads/mark-viewed-thread-read.cjs");
 const FileUploadButton = require("../composer/FileUploadButton.cjs");
 const ComposerQuotePreview = require("../composer/ComposerQuotePreview.cjs");
 const ComposerAttachmentPreview = require("../composer/ComposerAttachmentPreview.cjs");
@@ -252,7 +253,10 @@ const AthenaChat = ({
   return /* @__PURE__ */ jsxRuntime.jsx(AthenaChatDefaultComponentsContext.Provider, { value: defaultComponentsContextValue, children: /* @__PURE__ */ jsxRuntime.jsx(AthenaChatErrorBoundary.AthenaChatErrorBoundary, { children: /* @__PURE__ */ jsxRuntime.jsx(toolFallback.ToolFallbackAppearanceProvider, { appearance: "thread", children: /* @__PURE__ */ jsxRuntime.jsx(apiClient.MentionAuthCtx.Provider, { value: mentionAuth, children: /* @__PURE__ */ jsxRuntime.jsx(
     chatThreadShell.ChatThreadShell,
     {
-      overlay: /* @__PURE__ */ jsxRuntime.jsx(threadLoadingOverlay.ThreadLoadingOverlay, {}),
+      overlay: /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsx(threadLoadingOverlay.ThreadLoadingOverlay, {}),
+        /* @__PURE__ */ jsxRuntime.jsx(markViewedThreadRead.MarkViewedThreadRead, {})
+      ] }),
       panelClassName: cnfast.cn(
         "aui-root aui-thread-root @container relative flex h-full flex-col bg-background",
         className
@@ -598,21 +602,22 @@ const MessageError = () => /* @__PURE__ */ jsxRuntime.jsx(react.MessagePrimitive
     }
   ) })
 ] }) });
-function useSecondsSince(resetKey) {
+function useSecondsSince({ resetKey, ticking = true }) {
   const [seconds, setSeconds] = react$1.useState(0);
   react$1.useEffect(() => {
     setSeconds(0);
+    if (!ticking) return;
     const startedAt = Date.now();
     const timer = setInterval(() => {
       setSeconds(Math.floor((Date.now() - startedAt) / 1e3));
     }, 1e3);
     return () => clearInterval(timer);
-  }, [resetKey]);
+  }, [resetKey, ticking]);
   return seconds;
 }
-const RunStatusLine = ({ verb, resetKey, className }) => {
-  const seconds = useSecondsSince(resetKey);
-  const stalled = seconds >= runActivity.RUN_ACTIVITY_STALL_SECONDS;
+const RunStatusLine = ({ verb, resetKey, toolCallInFlight = false, className }) => {
+  const seconds = useSecondsSince({ resetKey });
+  const stalled = runActivity.isRunActivityStalled({ seconds, toolCallInFlight });
   return /* @__PURE__ */ jsxRuntime.jsxs(
     "div",
     {
@@ -638,7 +643,7 @@ const RunStatusLine = ({ verb, resetKey, className }) => {
           {
             "aria-hidden": "true",
             className: cnfast.cn("tabular-nums", stalled && "text-amber-600 dark:text-amber-400"),
-            children: runActivity.runActivityLabel(seconds, verb)
+            children: runActivity.runActivityLabel({ seconds, verb, stalled })
           }
         ),
         /* @__PURE__ */ jsxRuntime.jsx("span", { "aria-live": "polite", className: "sr-only", children: stalled ? "Assistant is still working; nothing new for over thirty seconds." : `${verb}…` })
@@ -668,13 +673,22 @@ const AthenaMessageActivityIndicator = () => {
   });
   const activityKey = react.useAuiState((s) => runActivity.runActivityKey(s.message.parts));
   const verb = react.useAuiState((s) => runActivity.runActivityVerb(s.message.parts));
+  const toolCallInFlight = react.useAuiState((s) => runActivity.isToolCallInFlight(s.message.parts));
   if (!isRunning || activityKey === null) return null;
-  return /* @__PURE__ */ jsxRuntime.jsx(RunStatusLine, { verb: verb ?? "Working", resetKey: activityKey });
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    RunStatusLine,
+    {
+      verb: verb ?? "Working",
+      resetKey: activityKey,
+      toolCallInFlight
+    }
+  );
 };
 const AthenaGroupedRunMeta = () => {
   const activityKey = react.useAuiState((s) => runActivity.runActivityKey(s.message.parts));
-  const seconds = useSecondsSince(activityKey ?? "thinking");
-  const stalled = seconds >= runActivity.RUN_ACTIVITY_STALL_SECONDS;
+  const toolCallInFlight = react.useAuiState((s) => runActivity.isToolCallInFlight(s.message.parts));
+  const seconds = useSecondsSince({ resetKey: activityKey ?? "thinking", ticking: !toolCallInFlight });
+  const stalled = runActivity.isRunActivityStalled({ seconds, toolCallInFlight });
   if (!stalled) return null;
   return /* @__PURE__ */ jsxRuntime.jsxs(
     "span",